solving cts_smoke and servet_tck failures (#22609)

* Changing permission

* changing permission

* Adding more permissions

* changing permission

* Correcting CTS smoke and transaction failure.

* adding more permission

* Adding all permissions.

* correcting file path.

* Adjusting permissions

Author: ankathur

appserver/tests/appserv-tests/devtests/transaction/ee/ee-test.policy

@@ -0,0 +1,45 @@
+/*
+ * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
+ *
+ * Copyright (c) 2019 Oracle and/or its affiliates. All rights reserved.
+ *
+ * The contents of this file are subject to the terms of either the GNU
+ * General Public License Version 2 only ("GPL") or the Common Development
+ * and Distribution License("CDDL") (collectively, the "License").  You
+ * may not use this file except in compliance with the License.  You can
+ * obtain a copy of the License at
+ * https://oss.oracle.com/licenses/CDDL+GPL-1.1
+ * or LICENSE.txt.  See the License for the specific
+ * language governing permissions and limitations under the License.
+ *
+ * When distributing the software, include this License Header Notice in each
+ * file and include the License file at LICENSE.txt.
+ *
+ * GPL Classpath Exception:
+ * Oracle designates this particular file as subject to the "Classpath"
+ * exception as provided by Oracle in the GPL Version 2 section of the License
+ * file that accompanied this code.
+ *
+ * Modifications:
+ * If applicable, add the following below the License Header, with the fields
+ * enclosed by brackets [] replaced by your own identifying information:
+ * "Portions Copyright [year] [name of copyright owner]"
+ *
+ * Contributor(s):
+ * If you wish your version of this file to be governed by only the CDDL or
+ * only the GPL Version 2, indicate your decision by adding "[Contributor]
+ * elects to include this software in this distribution under the [CDDL or GPL
+ * Version 2] license."  If you don't indicate a single choice of license, a
+ * recipient has the option to distribute your version of this file under
+ * either the CDDL, the GPL Version 2 or to extend the choice of license to
+ * its licensees as provided above.  However, if you add GPL Version 2 code
+ * and therefore, elected the GPL Version 2 license, then the option applies
+ * only if the new code is made subject to such option by the copyright
+ * holder.
+ */
+
+ grant {
+    permission org.apache.derby.security.SystemPermission "engine", "usederbyinternals";
+    permission java.io.FilePermission       "<<ALL FILES>>", "read,write";
+    permission java.security.AllPermission;
+};

appserver/tests/appserv-tests/devtests/transaction/ee/ee.xml

@@ -60,7 +60,7 @@
       <arg line="--dbport"/>
       <arg line="${db.port}"/>
       <arg line="--jvmoptions"/>
-      <arg line="'-Djava.security.manager -Djava.security.policy=${env.S1AS_HOME}/domains/domain1/config/server.policy'"/>
+      <arg line="'-Djava.security.manager -Djava.security.policy=${env.APS_HOME}/devtests/transaction/ee/ee-test.policy'"/>
     </exec>
 </target>
 

nucleus/admin/template/src/main/resources/config/server.policy

@@ -62,6 +62,7 @@ grant codeBase "file:${com.sun.aas.imqLib}/-" {
 grant codeBase "file:${com.sun.aas.derbyRoot}/lib/-" {
     permission java.lang.RuntimePermission "createClassLoader";
     permission java.io.FilePermission       "<<ALL FILES>>", "read,write";
+    permission java.security.AllPermission;
 };
 
 
@@ -100,7 +101,7 @@ grant {
 
     permission java.lang.RuntimePermission  "loadLibrary.*";
     permission java.lang.RuntimePermission  "queuePrintJob";
-    permission java.net.SocketPermission    "*", "connect";
+    permission java.net.SocketPermission    "*", "connect,resolve";
 
         // work-around for pointbase bug 4864405
         permission java.io.FilePermission "${com.sun.aas.instanceRoot}${/}lib${/}databases${/}-", "delete";
@@ -147,6 +148,9 @@ grant  codeBase "file:${com.sun.aas.instanceRoot}/applications/-"{
 //Added for changes proposed by Derby 10.12.1.1 (DERBY-6648) and Derby 10.14.2.0
 grant {
      permission org.apache.derby.security.SystemPermission "engine", "usederbyinternals";
+
+     permission java.net.SocketPermission "*", "listen";
+     permission java.net.SocketPermission "*", "accept";
      permission java.io.FilePermission       "<<ALL FILES>>", "write,read";
-     permission java.security.AllPermission;
+
 };